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flEMDPAKDUM FOR : Nathan C. Fitts, Chairman, Intelligence 

Information Handling Committee < IKC) 

FROM . i John F. Blake 

Acting Deputy Director 


SUBJECT 

REFERENCE 


; Draft DC. I Report to tbs Senate Select Committee on 
Intelligence on Community Information Handling 

t IDC/MM 78-03, 31 January 1973, same subject 


1. There has. been insufficient thro to perform an in-depth review ; 
of a report with such far-reaching implications. It is our view that 
organizational and procedural proposals of this magnitude which have 
not been developed in collaboration with the members of the Intelligence 
Ccmnunity should not be forwarded to a Congressional Committee until 
they have been thoroughly coordinated v/ith and agreed to by Community 
members. Mere time is needed to hear the views of the NFID n-ember agencies 
on the actions proposed. Very little of what is set forth in the paper 
has been surfaced before. 



2. He feel that in most respects the report contains a compre- 
hensive and balanced presentation of Community information handling 
problems, the kinds of oysters and data bases being developed and 
maintained , the undeniable deficiencies in collaborative planning 
and operation of systems, and the means by which some existing ills 
wight be eliminated, coupled with due warnings about the necessity to' 
weigh the cost-benefits of such approaches and their attendant risks. 

In principle, its recommendations for new management approaches seem 
fundamentally sound as well as its propose] missions and functions for 
the organizations making up the new structure. Soire degree of centralized 
review of the total AOP portion of the NFIP .offers the possibility of 
Identifying and possibly eliminating duplicative efforts. A Community 
Information Systems Office (CI20) makes sense. The paper argues fer 


a. plan which identifies needs, describes 


assets. 


and relates needs to 


assets, v*e agree with this approach, he are not, however 
that the development of a CIUF will be easily accorol ished 
we certain that anything other than a .loosely knit system. 


, optimistic 
. Tor are 
is needed. 
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3. Vie are concerned that the report tells the Senate Select 
Committee on Intelligence (SECT) more than is necessary about the various 
facets of Community information handling problems, tells its story in 
too many pages and with undue repetition, and commits the DCI and the 

Cl SO (not to mention the NFI3 agencies themselves) to an excessively 
ambitious and detailed set of goals, organisational relationships and 
controls which may subject us to restraints we will subsequently 
regret. We believe the paper would be more effective if it were 
tightened up by removing many of its redundancies and by reducing 
the number of annexes. 

4. We feel it is inappropriate to send an organizational charter 
(Annex D) to Congress before it has been signed by the DCI. In 
addition, Community members should fully understand and accept the 
new CISC responsibilities and activities before that organization's 
charter is forwarded to the DCI for signature. 

5. The covering report and the annexes are inconsistent in 
some respects. In particular, it i3 unclear whether the CISC 

is a staff or a line organization. In Annex C it is more clearly a 
staff organization performing logical staff functions such as 
monitoring, reviewing, coordinating, advising, guiding, etc.j while 
in the covering report and in Annex E, the CI£G is depicted as performing 
line functions such as designing, planning, developing alternatives, 
etc. The line functions reflected in the report and in Annex E 
would require an unnecessary duplication of technical staffs of the 
Community members. 

6. We have two additional general criticisms. First, 
frequent reference is made to the "Community Information Handling 
System" (CIH3). To the reader there is some suggestion in this that 
it is one totally integrated system, fce do not believe this is the 
intent, but the implication is dangerous because it seems to promise 
something that will never be realized. Second, the theme of centralised 
and coordinated planning and decentralized operation should be qualified. 
Planning is an activity that must take place at all levels. Vie do not 
believe it is intended teat planning should be conducted only by the 
CISO. ' ' » 


7. / while our principal concerns relate to the covering report and 
to Annexes D and E, we feel that Annexes A, E, and C, with certain changes 
and Anpex F could be forwarded to the Senate as sufficient response to 
their 'directive with a brief covering memo stating essentially tee 
folldwing: 
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v-:e know v;a have problems and have formed an orcianizs— 
tion to coordinate and nx>n i to r ADP activities in a 
Community context. Ilia situation is described in Annexes 
A and B, and the charter for the new organization is in 
Annex C. Details of Agency ADP files and system descrip- 
tions are contained in Annex F. Wa are currently 
developing procedures for planning and coordinating 
ADP activities in the Intelligence Community. Cur 
goal3 for the first year arei 

a. To establish CIGO as a central planning 
organization in February 1973 as a part of 
the DCI's Resource Management Staff. 

b. To review annual HFIP resource reguests and 
identify ADP-T issues needing DCI resolution. 

c. To begin a formal and continuous dialogue with 
ADP-T offices in the Intelligence Community as 
well as program managers to keep abreast of 

. operating systems, systems under development, 
and new ADP initiatives. 

d. To respond to Congressional needs for ATP-T 
information as .required, IP begin identifying 

and examining major FT 1979-84 issues as previously 
requested by ZF.Cl . 

e. To undertake selected studies and technical evalua- 
tions in problem areas in support of resource manage- 
ment decision making. 


f. IP undertake actions to evaluate the feasibility 
of a ’Community Information Handling System. ' 

”e will report to you next year on our progress." 

8. Vie tli ink the SSCI would satisfied that such a planning 
and coordinating body had been established and would accept 
the need to give that organisation time to staff up and determine 
what the limitations on its assets and programs might be. 


p * '■■’•ith respect to Annex F, we have already provided you a 

new sheet on CIA's ADP costs, using updated figures from the 
Congressional Budget, end a description of CIA's improved procedures 


3 
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for central 2U3P over- Lev (copies attached). These should be included 
within CIA’s portion of Annex f. 

10* Cur pore specific cowwnta on the report, including the 
changes which are necessary for annexes .VC, are attached. 


» 
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John P. Blake 


Attachments a 

Consents on Specific r-ointu 

CIA Automatic data Processing Costs Pa 3 t and Projected 

Itc roved Central Overview of Autorsatic Data Processing in CIA 


Distribution* 

Or ig - Acre w/att 

- AOOCi v/att 

- ER vr/att 

- Each directorate ADP control officer w/att 

- Cosset w/att 

- A/C/P w/att 

- Coopt Beading w/att 

- CcTipt Suhj v/att 
CG Chrono u/att 

fr ha (7 Feb 78) 
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Attachment 

Comment on Specific Points 

Executive Summary 

° tion'handiTS^f 30 " 1 of ■ Preserving the operation' of informa- 
f2 d \ lng systems and maintenance of data bases on 
a decentralized basis, with- the CISO undertaking centralized 
planning and recommending funding levels, is sound. As noted 
above, however, the planning function must be shared and 
we assume that the principal initiative for planning new 

whf X viSn^f ^h e - t0 f St With the line Organizations 
vho, by virtue of their close contact with the user, will 

best understand the deficiencies of extant systems and 

the need for change. Perhaps this point could be clarified. 

° tion the sche<3ule ? imposed by the budget formula- 

tion process, it seems unrealistic to propose that the CISO 
organisation, yet unborn, can get enouS 

r- FY “ 80 bud 9 et P lan - Indeed, the CMS Start- 

F * 9 ‘ 4 * 1 ^ at ^ end of the report seems to 
suggest otherwise. 

Report • 


Para, i 7 — per your instructions, CIA included only those 

filSS Which could be of Possible interest 
”\ tb< r Int elligence Community. Our personnel, payroll, 

o£ fSsslonf 11 " 3 ' “ PartlCUlar ' 

Para. 1.12— This discussion of shared data bases seems 
tosuggest that ° nl y automated files accessible through 
remote on-line terminals are shared. Actually there- 
are many additional files shared through telephonic 

vL -L niean ! ; ' CIA/OCR, for example, has long provided 

- Wltb most of its biographic reference support 

n rr — ' through the grey phone system. 

Similarly, the AEGIS subject index to Community 

th rep ? rtia 9 is USed by rnany other agencies 
than CIA, even though only a subset of the file is 

available, for interrogation on-line by other NFIB members. 

F ft, 2 * 2 r The UndUS ? mphasis often Placed on automation 
vs. manual processes is wisely avoided here and elsewhere 

a C^efn?^ • ann T S * As indica ted, there must be 
a eyeful evaluation of the trade-offs on a case-by-case 

DaSiS* u 
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o Para 2.3 — The meaning of the fourth sentence in this 

paragraph beginning with the words "This system (CIHS) 
must possess..." is obscure. In addition, it is said here 
that a CIHS must be developed whereas paragraph 1.8 of 
the Executive Summary recommends that the CISO should 
"undertake actions to evaluate the feasibility ” (underlining 
added) of • a CIHS. This contradiction should be eliminated. 

o Para. 3.7 — An excellent point is made here about the 
need to approach data base sharing cautiously, with due 
regard for cost/benefit considerations, and the possible 
alternatives (e.g., mail systems) to remote querying via 
telecommunication networks. 

o Para. 3.8 — Another commendable cautionary note is 
expressed about the expense of changing systems in 
behalf of other users and the assurances needed 
that the additional resources will be forthcoming 
before such commitments are undertaken. 

o Para. 3.14 — The discussion included here of problems 
and possible cost implications of data element stan- 
dardization is well done and properly stressed . Among 
other things, reference is made to the possibility of 
using the computer to translate from one indexing 
standard to another. Again, this is a problem often 
subjected to oversimplified "solutions." 

o Para. 3.17 — While the issue of whether to automate 
an activity should certainly undergo rigorous analysis 
by, among others, the CISO, let no one underestimate 
the difficulty of this process or suggest that mere 
improved "managerial techniques" can readily overcome 
the associated problems. 

o Para. 3.21 — The implication of this paragraph appears 
to be that all ADP proposals will be reviewed by the 
CISO. If so, we submit that this organization would 
need a staff far in excess of the "High Intensity" 
level of the 15 proposed for its Information System 
Analysis Division. Presumably, such reviews will 
have to be limited to systems exceeding a certain 
anticipa ted funding level. 

o Para. 3.23 — Some reference should be made in this 
section of the report to the on-going CIA Executive 
Advisory Group's review of ADP systems. The paragraph 
should not suggest that top management has given no 
attention to the costs of ADP systems and resource 
competition in this area. 
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principles to guide Community information handling, 
which we fully support. 

Annex A 

t ■ *> 

o Para. 1.2 — We would suggest an addition to the last 
sentence of this paragraph stressing that some of the 
• listed systems are not as yet operational. Until one 
examines the follow-on tables in some detail, this fact 
does not become apparent. We are also at a loss to 
understand why some of the largest and most significant 
production support systems are not included in the 
tables, e.g., the 3.1 million record AEGIS file and 
CIRC, while much less important systems are. 

o Table A-l— -For the line entry starting with CIA/SAFE: 
Change 1) "CIA/SAFE" to "SAFE"; 
change 2) "CIA/Support" to "Support”; 
change 3) "CIA" to "DIA/CIA". 

o Table A-l — Delete the line entry starting with DI A/SAFE, 

o Tab 2 — The average age of Model 360/67 is listed as 1.2 
The CIA 360/67 was installed in 1969. Recommend the 
average age figure be verified. 

Annex B 

o General — This annex reviews some very practical aspects 
of the entire information handling issue. The tables 
on pages B-6-8 are useful as well. Much of Annex B, 
however, is either redundant or adds little to the 
report. Listing the COINS files, for example, does 
not convey much to the reader because the files are 
not described. 

o Para. 1.1 — Reference should be made to other ways of 
sharing files than by electronic means. 

o Para. 1.4 — This important paragraph might have gone on . 
to point out that because of the unique characteristics 
of the different Community data bases, it is virtually 
impossible to design a single information handling 
system, including software and hardware, which will 
suit more than a few application areas. This applies 
to the SAFE/ADISS system as well as to projects of 
lesser magnitude. 
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XT Para. I.6~xn addition to cne excellent point made 

about providing the necessary resources to an 
organization charged with fulfilling some Community 
information handling responsibility, one might add 
that users of such a system also need the assurance 
that if they cease and desist storing the same data 
themselves, the activity will be continued more or 
less indefinitely. 

o Table B-2 — Ihforraation Services Staff is incorrectly 
identified 

. r 

o Para., 2.11 — Dissemination controls are indiscriminately 
mixed with security classifications in a sentence near 
the end of this paragraph. Beginning with the words 
"SI Compartment," what follows should be described 
as some of the dissemination controls used in addition 
to security classifications. 

o Para. 3.5 — -We object to the use of the word "today" 
at the beginning of the 4th sentence. The information 
handling role of central reference services, at least 
in the CIA, has never been limited to the activities 
of the traditional library. 

Annex C 

o General— This discussion of the CISO would be more 
useful if the CISO staffing estimate compared the 
current number of IHC staffers handling coordination 
efforts with at least the short-term personnel totals 
planned for the CISO. This could help in evaluation of 
the work cut out for the CISO in the first six months 
against what appears to be an underestimate of the 
manpower required to do the job. There is no 
identification in Annex C of the means by which 
the CISO manpower requirements have been estimated. 

o Para. 1.4: Fifth line — change "carry out" to 
"coordinate". 

o Para. 1.4: Ninth line - change "develop and use" to 
"establish requirements for, monitor the development 
of, and use". 

o Page C-2: Footnote - delete ", as defined in Annex d". 

o Figure C-2: Para. 2 under FUNCTIONS - change "To design 
and establish" to "To establish the requirements for 
and monitor the development of". 
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© Figure C-4: It is not clear what the Contractor Support 
functions of the Community Planning Division are. It 
is believed they should be: 

Coordinate planning for Contractor Support. 

Coordinate contract monitoring and administration. 

o Figure C-8: Para 3 under FUNCTIONS - Change "develop" 

• to "coordinate". 

1 

o Figure C-9: The CISO includes a Security and Privacy 
Standards Branch, which presumably would function as 
a focal point for Community computer security policy 
and standards. The DCI Security Committee currently 
has a subcommittee devoted to the development of 
computer security policy. While it might be profitable 
to transfer this function to the proposed CISO, a 
move in this direction should not be pursued 
summarily, without detailed Community coordination. 

Such review might suggest the need for a computer 
security focal point in the CISO in addition" to the 
functions of the DCI Security Committee in this 
area. However, if Annex C is sent to Congress, we 
urge that all reference to a computer security 
function in the CISO be deleted along with the 
identification of the Security and Privacy Standards 
Branch. 

Annex D 

We strongly recommend this Annex be eliminated from 
the report. In terms of authority to act, the new 
Executive Order provides such authority until a 
DCID can be coordinated within the NFIB community. 

Annex E 

This annex is redundant and too detailed. Paragraph 
3.6 stresses user needs, an excellent point, but it 
could be removed and placed elsewhere. 
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IMPROVED CENTRAL OVERVIEW OF AUTOMATIC DATA PROCESSING ' IN CIA 

(Addendum to CIA submission for the *' 

• Intelligence Community ADP Inventory 
for presentation to the Senate Select 
• Committee on Intelligence, dated 
19. September 1977 . ) . - 





(FOUO) While ADP initiative is decentralized within CIA, so that ADP may 
best be directed toward local needs and weighed carefully against alternative 
methods to accomplish a component's assigned tasks. Agency management - 
has taken significant steps this past year to improve central overview 
of ADP expenditures. ... . . 

(FOUO) In a memorandum to the Executive Advisory Group (EAG) in Decirnber 
1976 , the DDCI asked the Comptroller and the Director <?f Data Processing * A 
- to make joint recommendations with respect to two issues: a 

1. "What can be done to improve top management's ability 
to plan for future ADP resource requirements so that we may 
assure ourselves that the large ADP budget increases we are 
experiencing are in the overall interests of the Agency? r ' 

How can the key ADP investment; issues we face be brought 
forward for top management review so that we may establish 
guidance for the budget planning process?" 


2. "How can we moni tor current month-by-month use of 
the central services provided by the Office of Data Processing 
(ODP) in such a way as to ensure visibility to top management 
of the many demands being levied on ODP by Agency components 
and permit Agency-level decisions to be made on priorities 
when contentions for limited ODP resources arise?" 

* * 

(FOUO) A joint paper wab written by the Comptroller and the Director 
of Data Processing on the two issues. The EAG agreed in April 1977 to 
the actions they recommended, which were these: , 


1. The EAG will establish a deliberate ADP budget 
during the CIA program review, focusing broadly on the 
functional use of ADP and on major ADP investments — 
the key computer projects of Agency components that 
will spend over $250,000 on ADP during the program 
year, ODP-supported projects which are expected to cost 
over $250,000, ODP expansion plans, and important 
new projects identified by components. 


* ..... . 
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2. During the operating year, the EAG will 
• perforin a thorough, systematic review of the cost • • 
effectiveness of all major projects which are currently 
supported by ODP’ s ; central services. ~ . 

(POUO) The Comptroller and the Director of Data Processing developed 

procedures to carry out the above recommendations. The following events 

have since taken place: .... • 

- * « # '* * , 

,-y. U •• :3L. - An Agency ADP budget was prepared by the Comptroller 
• and included {for the first time) within the proposed 1979 ' 

' '•* Agency Program Plan. In June 1977, the EAG addressed the ' 

issues identified therein and agreed upon ADP funding levels,. 

• 2. In December 1977," the EAG began reviewing individually 
the 21 major projects supported by ODP on behalf of Agency 
components, to evaluate these uses of ODP’s resources within 
its 1978 funding level. The EAG was provided a Project Decision 
. Form for each project, containing a project descript ion .and • . f 

statements of its objectives and benefits — to weigh against 
estimated resource requirements. , • 

(FOUO) Both of these EAG actions have resulted in increased control 
of ADP growth by top management. They have caused managers at every 
level to plan their use of ADP with improved focus on cost effectiveness. 
The effort represents high-level managerial attention to computer use 
which is, to our knowledge, unique in Government. • 
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